fix yamllint

This commit is contained in:
Vivian 2023-05-12 09:18:19 +02:00
parent 9f9058e3c0
commit 80e52ba650
2 changed files with 62 additions and 46 deletions

View file

@ -5,45 +5,61 @@ kind: ClusterRole
metadata: metadata:
name: weave-admin name: weave-admin
rules: rules:
# Flux Resources # Flux Resources
- apiGroups: ["kustomize.toolkit.fluxcd.io"] - apiGroups: ["kustomize.toolkit.fluxcd.io"]
resources: [ "kustomizations" ] resources: ["kustomizations"]
verbs: [ "get", "list", "patch" ] verbs: ["get", "list", "patch"]
- apiGroups: ["helm.toolkit.fluxcd.io"] - apiGroups: ["helm.toolkit.fluxcd.io"]
resources: [ "helmreleases" ] resources: ["helmreleases"]
verbs: [ "get", "list", "patch" ] verbs: ["get", "list", "patch"]
- apiGroups: ["source.toolkit.fluxcd.io"] - apiGroups: ["source.toolkit.fluxcd.io"]
resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ] resources:
verbs: [ "get", "list", "patch" ] [
- apiGroups: [ "notification.toolkit.fluxcd.io" ] "buckets",
resources: [ "providers", "alerts" ] "helmcharts",
verbs: [ "get", "list" ] "gitrepositories",
- apiGroups: ["infra.contrib.fluxcd.io"] "helmrepositories",
resources: ["terraforms"] "ocirepositories",
verbs: [ "get", "list", "patch" ] ]
# Resources managed via Flux verbs: ["get", "list", "patch"]
- apiGroups: [""] - apiGroups: ["notification.toolkit.fluxcd.io"]
resources: ["configmaps", "secrets", "pods", "services", "namespaces", "persistentvolumes", "persistentvolumeclaims"] resources: ["providers", "alerts"]
verbs: [ "get", "list" ] verbs: ["get", "list"]
- apiGroups: ["apps"] - apiGroups: ["infra.contrib.fluxcd.io"]
resources: [ "deployments", "replicasets", "statefulsets"] resources: ["terraforms"]
verbs: [ "get", "list" ] verbs: ["get", "list", "patch"]
- apiGroups: ["batch"] # Resources managed via Flux
resources: [ "jobs", "cronjobs"] - apiGroups: [""]
verbs: [ "get", "list" ] resources:
- apiGroups: ["autoscaling"] [
resources: ["horizontalpodautoscalers"] "configmaps",
verbs: [ "get", "list" ] "secrets",
- apiGroups: ["rbac.authorization.k8s.io"] "pods",
resources: ["roles", "clusterroles", "rolebindings", "clusterrolebindings"] "services",
verbs: [ "get", "list" ] "namespaces",
- apiGroups: ["networking.k8s.io"] "persistentvolumes",
resources: ["ingresses"] "persistentvolumeclaims",
verbs: [ "get", "list" ] ]
# Feedback verbs: ["get", "list"]
- apiGroups: [""] - apiGroups: ["apps"]
resources: ["events"] resources: ["deployments", "replicasets", "statefulsets"]
verbs: ["get", "watch", "list"] verbs: ["get", "list"]
- apiGroups: ["batch"]
resources: ["jobs", "cronjobs"]
verbs: ["get", "list"]
- apiGroups: ["autoscaling"]
resources: ["horizontalpodautoscalers"]
verbs: ["get", "list"]
- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "clusterroles", "rolebindings", "clusterrolebindings"]
verbs: ["get", "list"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "list"]
# Feedback
- apiGroups: [""]
resources: ["events"]
verbs: ["get", "watch", "list"]
--- ---
# Bind the cluster admin role to admins # Bind the cluster admin role to admins
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
@ -51,9 +67,9 @@ kind: ClusterRoleBinding
metadata: metadata:
name: weave-admin name: weave-admin
subjects: subjects:
- kind: User - kind: User
name: "victor@xirion.net" name: "victor@xirion.net"
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole
name: weave-admin name: weave-admin

View file

@ -37,10 +37,10 @@ spec:
ingress: ingress:
enabled: true enabled: true
hosts: hosts:
- host: flux.0x76.dev - host: flux.0x76.dev
paths: paths:
- path: / - path: /
pathType: ImplementationSpecific pathType: ImplementationSpecific
adminUser: adminUser:
create: false create: false
passwordHash: $2a$10$uIY/YYe.CcRerpVvfk04muX86hLfXRH.K6jATZaVPqp.bnUIu/bsC passwordHash: $2a$10$uIY/YYe.CcRerpVvfk04muX86hLfXRH.K6jATZaVPqp.bnUIu/bsC